VMware promises Heartbleed patches for affected products by the weekend

The company has identified over two dozen affected product versions so far and is releasing updates

VMware started patching its products against the critical Heartbleed flaw that puts encrypted communications at risk, and plans to have updates ready for all affected products by Saturday.

The company's first Heartbleed patches were released Monday and are available for Horizon Workspace Server, its application management and virtualization software. The OpenSSL library used in the product has been updated to version 1.0.1g, which resolves the Heartbleed issue, the company said in a security advisory.

Users of Horizon Workspace Server 1.0 are advised to upgrade to version 1.5 and then apply the horizon-nginx-rpm-1.5.0.0-1736237.x86_64 patch. Users of Horizon Workspace Server 1.5 should also install the aforementioned patch, while users of Horizon Workspace Server 1.8 should update to horizon-nginx-rpm-1.8.1.1810-1736201.x86_64.

Other software from the Horizon product line, like the Horizon Workspace Client for Windows and Mac OSX and the Horizon View Client for Windows, Android and iOS, is also affected, but has yet to be patched.

VMware also identified many non-Horizon products that use OpenSSL 1.0.1 and are therefore vulnerable to Heartbleed. These include: ESXi 5.5, NSX-MH 4.x, NSX-V 6.0.x, NVP 3.x, vCenter Server 5.5, VMware Fusion 6.0.x VMware OVF Tool 3.5.0, VMware vCloud Automation Center (vCAC) 6.x, VMware vCloud Networking and Security (vCNS) 5.1.3 and VMware vCloud Networking and Security (vCNS) 5.5.1.

Patches for vFabric Web Server 5.0.x -- 5.3.x have been provided separately by GoPivotal, a joint venture between VMware and EMC that now controls the product.

VMware has published a knowledge base article that lists the affected products identified so far and said that it expects to have patches ready for them by Saturday. The related security advisory will continue be updated as those patches are released.

Join the Good Gear Guide newsletter!

Error: Please check your email address.

Tags patchessecuritypatch managementencryptionGoPivotalExploits / vulnerabilitiesVMware

Our Back to Business guide highlights the best products for you to boost your productivity at home, on the road, at the office, or in the classroom.

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Lucian Constantin

IDG News Service
Show Comments

Essentials

Lexar® JumpDrive® S57 USB 3.0 flash drive

Learn more >

Microsoft L5V-00027 Sculpt Ergonomic Keyboard Desktop

Learn more >

Mobile

Lexar® JumpDrive® S45 USB 3.0 flash drive 

Learn more >

Exec

Lexar® JumpDrive® C20c USB Type-C flash drive 

Learn more >

Lexar® Professional 1800x microSDHC™/microSDXC™ UHS-II cards 

Learn more >

Audio-Technica ATH-ANC70 Noise Cancelling Headphones

Learn more >

HD Pan/Tilt Wi-Fi Camera with Night Vision NC450

Learn more >

Budget

Back To Business Guide

Click for more ›

Most Popular Reviews

Latest News Articles

Resources

GGG Evaluation Team

Michael Hargreaves

Windows 10 for Business / Dell XPS

I’d happily recommend this touchscreen laptop and Windows 10 as a great way to get serious work done at a desk or on the road.

Aysha Strobbe

Windows 10 / HP Spectre

Ultimately, I think the Windows 10 environment is excellent for me as it caters for so many different uses. The inclusion of the Xbox app is also great for when you need some downtime too!

Mark Escubio

Windows 10 / Lenovo Yoga

For me, the Xbox Play Anywhere is a great new feature as it allows you to play your current Xbox games with higher resolutions and better graphics without forking out extra cash for another copy. Although available titles are still scarce, but I’m sure it will grow in time.

Kathy Cassidy

STYLISTIC Q702

First impression on unpacking the Q702 test unit was the solid feel and clean, minimalist styling.

Anthony Grifoni

STYLISTIC Q572

For work use, Microsoft Word and Excel programs pre-installed on the device are adequate for preparing short documents.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?